I had to change -A PREROUTING to -A OUTPUT to get it to work iptables -t nat -A OUTPUT -d 169.254.169.254 -p tcp --dport 80 --syn -j REDIRECT --to-port 1024